On Formal Specification of Maple Programs* 



Muhammad Taimoor Khan and Wolfgang Schreiner 

Doktoratskolleg Computational Mathematics 
and 

Research Institute for Symbolic Computation 
Johannes Kepler University 
Linz, Austria 
muhammad . khan@dk- c ompmath . j ku . at 
Wolfgang. SchreinerSrisc . jku. at 
http : //www. rise . jku. at/people/mtkhan/dklO/ 

Abstract. This paper is an example-based demonstration of our ini- 
tial results on the formal specification of programs written in the com- 
puter algebra language MiniMaple (a substantial subset of Maple with 
slight extensions). The main goal of this work is to define a verification 
framework for MiniMaple. Formal specification of MiniMaple programs 
is rather complex task as it supports non-standard types of objects, e.g. 
symbols and unevaluated expressions, and additional functions and pred- 
icates, e.g. runtime type tests etc. We have used the specification lan- 
guage to specify various computer algebra concepts respective objects of 
the Maple package DifferenceDifferenttal developed at our institute. 

1 Introduction 

We report on a project whose goal is to design and develop a tool to find behav- 
ioral errors such as type inconsistencies and violations of method preconditions 
in programs written in the language of the computer algebra system Maple; for 
this purpose, these programs need to be annotated with the types of variables 
and methods contracts [5]. 

As a starting point, we have defined a substantial subset of the computer 
algebra language Maple, which we call MiniMaple. Since type safety is a prereq- 
uisite of program correctness, we have formalized a type system for MiniMaple 
and implemented a corresponding type checker. The type checker has been ap- 
plied to the Maple package DifferenceDifferential [5] developed at our institute 
for the computation of bivariate difference-differential dimension polynomials. 
Furthermore, we have defined a language to formally specify the behavior of 
MiniMaple programs. As the next step, we will develop a verification calculus 
for MiniMaple. The other related technical details about the work presented in 
this paper are discussed in the accompanying paper [7]. For project details and 
related software, please visit |http : //www . rise . jku . at/people/mtkhan/ dklO/. 

The rest of the paper is organized as follows: in Section 2, we briefly demon- 
strate formal type system for MiniMaple by an example. In Section 3, we intro- 
duce and demonstrate the specification language for MiniMaple by an example. 
Section 4 presents conclusions and future work. 



2 A Type System for MiniMaple 

MiniMaple procedure parameters, return types and corresponding local (vari- 
able) declarations needs to be (manually) type annotated. Type inference would 

* The research was funded by the Austrian Science Fund (FWF): W1214-N15, project 
DK10. 
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be partially possible and is planed as a later goal. The results we derive with 
type checking Maple can also be applied to Mathematica, as Mathematica has 
almost the same kinds of runtime objects as Maple. 

Listing 1 gives an example of a MiniMaple program which we will use in the 
following section for the discussion of type checking respective formal specifica- 
tion. Also the type information produced by the type system is shown by the 
mapping tt of program variables to types. For other related technical details of 
the type system, please see @]. 

1. status:=0; 



2. prod := proc(l::list(Or(integer,float)))::[integer, float]; 

3. # ir={hlist(Or (integer, float))} 
4- global status; 

5. local i, x::Or (integer, float), si::integer: = l, sf::float:=1.0; 

6. # 7r={..., i.symbol, x:Or(integer,float),..., status:anything} 

7. for i from 1 by 1 to nops(l) do 

8. x:=l[i]; status:=i; 

9. # tt—{..., i.integer, status:integer} 

10. if type(x, integer) then 

11. # tv—{..., i.integer, xiinteger, si.integer, status:integer} 

12. if (x = 0) then 

13. return [si,sf]; 
14- end if; 

15. si:=si*x; 

16. elif type(x, float) then 

17. # tt—{..., i.integer, x.float, sf-.float, status:integer} 

18. if (x < 0.5) then 

19. return [si,sf]; 

20. end if; 

21. sf:=sf*x; 

22. end if; 

23. # tv—{..., i.integer, x:Or (integer, Boat),..., status:integer} 
24- end do; 

25. # 7r={..., i.symbol, x:Or(integer,float),..., status:anything} 

26. status: =-1; 

27. # 7r={..., i.symbol, x:Or(integer,float),..., status:integer} 

28. return [si,sf]; 

29. end proc; 



30. result := prod([l, 8.54, 34.4, 6, 8.1, 10, 12, 5.4]); 

Listing 1: The example MiniMaple procedure type-checked 
The following problems arise from type checking MiniMaple programs: 

— Global variables (declarations) can not be type annotated; therefore values 
of arbitrary types can be assigned to global variables in Maple. Therefore we 
introduce global and local contexts to handle the different semantics of the 
variables inside and outside of the body of a procedure respectively loop. 

• In a global context new variables may be introduced by assignments and 
the types of variables may change arbitrarily by assignments. 

• In a local context variables can only be introduced by declarations. The 
types of variables can only be specialized i.e. the new value of a vari- 
able should be a sub-type of the declared variable type. The sub-typing 
relation is observed while specializing the types of variables. 

— A predicate type(E, T) (which is true if the value of expression E has type 
T) may direct the control flow of a program. If this predicate is used in 
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a conditional, then different branches of the conditional may have different 
type information for the same variable. We keep track of the type information 
introduced by the different type tests from different branches to adequately 
reason about the possible types of a variable. For instance, if a variable x has 
type Or(integer, float), in a conditional statement where the "if branch is 
guarded by a test type(x, integer), in the "else" branch x has automatically 
type float. This automatic type inferencing only applies if an identifier has 
a union type. A warning is generated, if a test is redundant (always yields 
true or false). 

The type checker has been applied to the Maple package DifferenceDifferential [2] 
No crucial typing errors have been found but some bad code parts have been 
identified that can cause problems, e.g., variables that are declared but not used 
(and therefore cannot be type checked) and variables that have duplicate global 
and local declarations. 

3 A Specification Language for MiniMaple 

Based on the type system presented in the previous section, we have developed a 
formal specification language for MiniMaple. This language is a logical formula 
language which is based on Maple notations but extended by new concepts. 
The formula language supports various forms of quantifiers, logical quantifiers 
(exists and forall), numerical quantifiers (add, mul, min and max) and se- 
quential quantifier (seq) representing truth values, numeric values and sequence 
of values respectively. We have extended the corresponding Maple syntax, e.g., 
logical quantifiers use typed variables and numerical quantifiers are equipped 
with logical conditions that filter values from the specified variable range. 

Also the language allows to formally specify the behavior of procedures by 
pre- and post-conditions and other constraints; it also supports loop specifica- 
tions and assertions. In contrast to specification languages such as Java Modeling 
Language [31 , abstract data types can be introduced to specify abstract concepts 
and notions from computer algebra. 
(*<3 

requires true; 
global status; 
ensures 

(status = -1 and RESULT[1] = mul(e, e in 1, type(e, integer)) 
and RESULT[2] = mul(e, e in 1, type(e,float)) 

and forall(i::integer, l<=i and i<=nops(l) and type(l[i], integer) implies l[i]<>0) 
and forall(i::integer, l<=i and i<=nops(l) and type(l[i] .float) implies l[i] > =0.5)) 
or 

(l<=status and status<=nops(l) and RESULT[1] = mul(l[i], i=l..status-l, type(l[i],integ 
and RESULT[2] = mul(l[i], i=l.. status- 1, type(l[i], float)) 

and ((type(l[status], integer) and l[status]=0) or (type(l[status], float) and l[status]<0.5)) 
and forall(i::integer, l<=i and i<status and type(l[i], integer) implies l[i]<>0) 
and forall(i::integer, l<=i and i<status and type(l[i], float) implies l[i]>=0.5)); 
©*) 

proc(l::list(Or(integer,float)))::[integer, float]; ... end proc; 

Listing 2: The example MiniMaple procedure formally specified 
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Listing 2 gives a formal specification of the example procedure introduced 
in Section 2. The procedure has no pre-condition as shown in the requires 
clause; the global clause says that a global variable status can be modified by 
the body of the procedure. The normal behavior of the procedure is specified 
in the ensures clause. The post condition specifies that, if the complete list 
is processed then we get the result as the product of all integers and floats in 
the list but if procedure terminates pre-maturely then we only get the product 
of integers and floats till the value of variable status (index of the input list). 
For the complete syntax and other details of the formal specification language 
see [5]. To test the specification language, we have formally specified some parts 
of the Maple package DifferenceDifferential [2] developed at our institute as the 
main test for the specification language. 

4 Conclusions 

We may use the specification language sketched in this short paper to gener- 
ate executable assertions that are embedded in MiniMaple programs and check 
at runtime the validity of pre/post conditions. Our main goal, however, is to 
use the specification language to verify the correctness of MiniMaple annotated 
programs by static analysis, in particular to detect violations of methods precon- 
ditions. For this purpose, based on the results of a prior investigation, we intend 
to use the verification framework Why3 [T] to implement the verification calcu- 
lus for MiniMaple, i.e., to translate MiniMaple into the intermediate language 
of Why3 and to apply its verification condition generator to generate verifica- 
tion conditions and prove their correctness with various back-end provers. Since 
the verification calculus must be sound, we have defined a formal semantics of 
MiniMaple [5] such that the correctness of the transformation can be shown. 
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Preface 



This textbook is intended for use by students of physics, physical chemistry, 
and theoretical chemistry. The reader is presumed to have a basic knowledge 
of atomic and quantum physics at the level provided, for example, by the first 
few chapters in our book The Physics of Atoms and Quanta. The student of 
physics will find here material which should be included in the basic education 
of every physicist. This book should furthermore allow students to acquire an 
appreciation of the breadth and variety within the field of molecular physics and 
its future as a fascinating area of research. 

For the student of chemistry, the concepts introduced in this book will provide 
a theoretical framework for that entire field of study. With the help of these con- 
cepts, it is at least in principle possible to reduce the enormous body of empirical 
chemical knowledge to a few basic principles: those of quantum mechanics. In 
addition, modern physical methods whose fundamentals are introduced here are 
becoming increasingly important in chemistry and now represent indispensable 
tools for the chemist. As examples, we might mention the structural analysis of 
complex organic compounds, spectroscopic investigation of very rapid reaction 
processes or, as a practical application, the remote detection of pollutants in the 
air. 
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1 Fixed-Period Problems: The Sublinear Case 

With this chapter, the preliminaries are over, and we begin the search for periodic 
solutions to Hamiltonian systems. All this will be done in the convex case; that 
is, we shall study the boundary-value problem 

x = JH'(t,x) 
x(0) = x{T) 

with H(t, •) a convex function of x, going to +00 when ||x|| — > 00. 
1.1 Autonomous Systems 

In this section, we will consider the case when the Hamiltonian H(x) is au- 
tonomous. For the sake of simplicity, we shall also assume that it is C x . 

We shall first consider the question of nontriviality, within the general frame- 
work of (Aoo, _Boo)-subquadratic Hamiltonians. In the second subsection, we shall 
look into the special case when H is (0, 6oo)-subquadratic, and we shall try to 
derive additional information. 

The General Case: Nontriviality. We assume that H is ( A 00, Boo)- sub- 
quadratic at infinity, for some constant symmetric matrices Aoo and B^, with 
Boo — Aoc positive definite. Set: 



7 : — smallest eigenvalue of B^ — A,. 



oc 



(1) 



A : = largest negative eigenvalue of J— + A, 



dt 



OO 



(2) 



Theorem [T] tells us that if A + 7 < 0, the boundary- value problem: 



x = JH'{x) 
x{0) = x{T) 



(3) 



has at least one solution x, which is found by minimizing the dual action func- 
tional: 

" "1 



ip(u) 



(A-^u) +N*{-u) 



dt 



(4) 



on the range of A, which is a subspace R{A) 2 L with finite codimension. Here 



N{x) := H{x) - - {A^x.x) 



is a convex function, and 



1 



N(x) < - {{Boo -A ao )x,x) +c \Jx 

Proposition 1. Assume H'(0) = and H(0) = 0. Set: 

5 := liminf 2N{x) lldl" 2 . 

x— >0 

If 7 < —A < 5, the solution u is non-zero: 

x{t) ^0 Vi . 



(5) 



(6) 



(7) 



(8) 



Proof. Condition ([7J means that, for every 5' > 5, there is some e > such that 

(9) 



\x\\ < e =► N{x) < 5 - \\x\\ 2 



It is an exercise in convex analysis, into which we shall not go, to show that 
this implies that there is an r\ > such that 



f\\x\\<V^N*{y)<^\\yf 



(10) 



Fig. 1. This is the caption of the figure displaying a white eagle and a white horse on 
a snow field 
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Since u\ is a smooth function, we will have H/iuiH^ < rj for h small enough, 
and inequality (|10[) will hold, yielding thereby: 



i>(hui) < \\uif 2 + ||ui|| 2 



(11) 



If we choose 6' close enough to S, the quantity (-^ + will be negative, and 
we end up with 

i>(hui) < for h ^ small . (12) 

On the other hand, we check directly that V'(O) = 0. This shows that cannot 
be a minimizer of ip, not even a local one. So u ^ and u ^ A~ 1 (0) = 0. □ 



2 and (aoo^b^-subquadratic at infinity. Let £i, 
, £jv &e i/ie equilibria, that is, the solutions of H'(^) = 0. Denote by ojk the 



Corollary 1. Assume H is C and (000,600 



smallest eigenvalue of H" (£&), and set: 

u! := Min {u>i, . . . , w^} 



T 

— 600 < —E 

Z7T 



a~ 

2tt ° 



T 
2?r 



(13) 
(14) 



i/ien minimization of i\) yields a non-constant T-periodic solution x. 



We recall once more that by the integer part E[a] of a e H, we mean the 
a G 2Zi such that a < a < a + 1. For instance, if we take doo = 0, Corollary 2 
tells us that x exists and is non-constant provided that: 



T , T 
— 60c < 1 < — 
2tt 2tt 



or 



2tt 2tt 

W ' 600 



(15) 
(16) 



Proof. The spectrum of A is l^r-Z? 
given by ^k + Ooo, where 



rp ft O 



27T,, 

aoo < < — (k 



Ooo- The largest negative eigenvalue A is 
l) + aoo- (17) 



Hence: 



k a = E 



T 



The condition 7 < — A < 5 now becomes: 

27T 



< 



T 



k a - Ooo < u ■ 



which is precisely condition (fT4 



(18) 

(19) 
□ 
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Lemma 1. Assume that H is C 2 on R 2 "\{0} and that H"(x) is non-degenerate 
for any x ^= 0. Then any local minimizer x of ' i\) has minimal period T. 

Proof. We know that x, or x + £ for some constant £ £ H 2 ™, is a T-periodic 
solution of the Hamiltonian system: 

x = JH'{x) . (20) 

There is no loss of generality in taking £ = 0. So ip(x) > ip(x) for all x in 
some neighbourhood of x in IT 1 ' 2 (TR/TZ; TR 2n ) . 

But this index is precisely the index it(x) of the T-periodic solution x over 
the interval (0,T), as defined in Sect. 2.6. So 

i T {x) = . (21) 

Now if x has a lower period, T/k say, we would have, by Corollary 31: 

i T (x) = i k T/k(x) > ki T / k (x) + fc-l>fc-l>l . (22) 

This would contradict ([2T]l . and thus cannot happen. □ 

Notes and Comments. The results in this section are a refined version of pQ; the 
minimality result of Proposition 14 was the first of its kind. 

To understand the nontriviality conditions, such as the one in formula (|16j) . 
one may think of a one-parameter family xt, T £ (27ra; _1 , 27t6^ c 1 ) of periodic 
solutions, £t(0) = xt(T), with xt going away to infinity when T — > 2ituj~ 1 , 
which is the period of the linearized system at 0. 



Table 1. This is the example table taken out of The TftXbook, p. 246 



Year 


World population 


8000 B.C. 


5,000,000 


50 A.D. 


200,000,000 


1650 A.D. 


500,000,000 


1945 A.D. 


2,300,000,000 


1980 A.D. 


4,400,000,000 



Theorem 1 (Ghoussoub-Preiss). Assume H(t,x) is (0, e)-subquadratic at 
infinity for all e > 0, and T-periodic in t 

H(t, •) is convex Vf (23) 

H(-,x) is T-periodic Vx (24) 
H (t, x) > n (\\x\\) with n(s)s _1 — » oo as s — » oo (25) 
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Ve>0, 3c : H(t,x) < ^\\xf + c . (26) 

Assume also that H is C 2 , and H"(t,x) is positive definite everywhere. Then 
there is a sequence Xk, k <E IN, of kT -periodic solutions of the system 

x = JH'(t,x) (27) 

such that, for every k S IN, there is some p a e IN with: 

P > Po => x pk ^ x k . (28) 

□ 

Example 1 (External forcing ). Consider the system: 

x = JH'{x) + f(t) (29) 

where the Hamiltonian H is (0, &oo)-subquadratic, and the forcing term is a 
distribution on the circle: 

f=j t F + f Q with F e L 2 (m,/T2Z; H 2n ) , (30) 
where f := T _1 f(t)dt. For instance, 

/(*) = E « . ( 31 ) 

fceiN 

where 5 k is the Dirac mass at t = k and £ G 1R 2 " is a constant, fits the pre- 
scription. This means that the system x = JH'(x) is being excited by a series 
of identical shocks at interval T. 

Definition 1. Let A^^t) and i?oo(£) be symmetric operators in JR 2n , depending 
continuously on t G [0,T], such that A^^) < -Boo(i) for all t. 

A Borelian function H : [0,T] x H 2 " JR is called (A^, B^-subquadratic 



at infinity if there exists a function N(t, x) such that: 

H(t,x) = ^{A 00 {t)x,x)+N(t,x) (32) 

Vf , N(t, x) is convex with respect to x (33) 

N(t, x) > n{\\x\\) with n(s)s^ 1 -> +oo as s ->• +oo (34) 

BcelR : x) < i (Boo^x,^) +c Vx . (35) 



If A^t) = aool and B^t) = b^I, with < s H, we s/mZZ say i/iai 
-ff is (doo, boo) -subquadratic at infinity. As an example, the function ||x|| a , with 
1 < a < 2, is (0, e)-subquadratic at infinity for every e > 0. Similarly, the 
Hamiltonian 

H{t,x) = \k\\k\\ 2 + \\x\r (36) 
is (fc, fc + e)-subquadratic for every e > 0. iVoie fftaf, if k < 0, it is not convex. 
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Notes and Comments. The first results on subharmonics were obtained by Ra- 
binowitz in [5] , who showed the existence of infinitely many subharmonics both 
in the subquadratic and superquadratic case, with suitable growth conditions 
on H' . Again the duality approach enabled Clarke and Ekeland in 2, to treat 
the same problem in the convex-subquadratic case, with growth conditions on 
H only. 

Recently, Michalek and Tarantello (see [3] and [4]) have obtained lower bound 
on the number of subharmonics of period kT, based on symmetry considerations 
and on pinching estimates, as in Sect. 5.2 of this article. 
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1 Fixed-Period Problems: The Sublinear Case 

With this chapter, the preliminaries are over, and we begin the search for periodic 
solutions to Hamiltonian systems. All this will be done in the convex case; that 
is, we shall study the boundary-value problem 

x = JH'(t,x) 
x(0) = x{T) 

with H(t, •) a convex function of x, going to +00 when ||x|| — > 00. 
1.1 Autonomous Systems 

In this section, we will consider the case when the Hamiltonian H(x) is au- 
tonomous. For the sake of simplicity, we shall also assume that it is C . 

We shall first consider the question of nontriviality, within the general frame- 
work of (Aoo, _Boo)-subquadratic Hamiltonians. In the second subsection, we shall 
look into the special case when H is (0, 6 OQ )-subquadratic, and we shall try to 
derive additional information. 

The General Case: Nontriviality. We assume that H is (^4oo, -Boo)- sub- 
quadratic at infinity, for some constant symmetric matrices Aoo and B^, with 
Boo — ^4oo positive definite. Set: 

7 : = smallest eigenvalue of B^ — Aoo (1) 
A : = largest negative eigenvalue of J^- + . (2) 



Theorem 21 tells us that if A + 7 < 0, the boundary-value problem: 



x = JH'(x) 
x(0) = x{T) 



(3) 



has at least one solution x, which is found by minimizing the dual action func- 
tional: 

" "1 



ip(u) 



(A-y u) +N*{-u) 



dt 



(4) 



on the range of A, which is a subspace R{A) 2 L with finite codimension. Here 



N{x) := H{x) - - {A^x.x) 



is a convex function, and 



1 



N{x) -^-{{Boo- A OQ )x,x)+c \Jx 

Proposition 1. Assume H'(0) = and H(0) = 0. Set: 

5 := liminf 2N(x) Ibll" 2 . 

x— >0 

If 7 < —A < 5, the solution u is non-zero: 

x{t) ^0 Vi . 



(5) 



(6) 



(7) 



(8) 



Proof. Condition ([7J means that, for every 5' > 5, there is some e > such that 

(9) 



\x\\ < e =► N(x) < 5 - \\x\\ 2 



It is an exercise in convex analysis, into which we shall not go, to show that 
this implies that there is an r\ > such that 



f\\x\\<V^N*(y)<^\\yf 



(10) 



Fig. 1. This is the caption of the figure displaying a white eagle and a white horse on 
a snow field 
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Since u\ is a smooth function, we will have H/iuiH^ < rj for h small enough, 
and inequality (|10[) will hold, yielding thereby: 



i>(hui) < \\uif 2 + ||ui|| 2 



(11) 



If we choose 6' close enough to S, the quantity (-^ + will be negative, and 
we end up with 

i>(hui) < for h ^ small . (12) 

On the other hand, we check directly that V'(O) = 0. This shows that cannot 
be a minimizer of ip, not even a local one. So u ^ and u ^ A~ 1 (0) = 0. □ 



2 and (aoo^b^-subquadratic at infinity. Let £i, 
, £jv &e i/ie equilibria, that is, the solutions of H'(^) = 0. Denote by ojk the 



Corollary 1. Assume H is C and (000,600 



smallest eigenvalue of H" (£&), and set: 

u! := Min {u>i, . . . , w^} 



T 

— 600 < —E 

Z7T 



a~ 

2tt ° 



T 
2?r 



(13) 
(14) 



i/ien minimization of i\) yields a non-constant T-periodic solution x. 



We recall once more that by the integer part E[a] of a e H, we mean the 
a G 2Zi such that a < a < a + 1. For instance, if we take doo = 0, Corollary 2 
tells us that x exists and is non-constant provided that: 



T , T 
— 60c < 1 < — 
2tt 2tt 



or 



2tt 2tt 

W ' 600 



(15) 
(16) 



Proof. The spectrum of A is l^r-Z? 
given by ^k + Ooo, where 



rp ft O 



27T,, 

aoo < < — (k 



Ooo- The largest negative eigenvalue A is 
l) + aoo- (17) 



Hence: 



k a = E 



T 



The condition 7 < — A < 5 now becomes: 

27T 



< 



T 



k a - Ooo < u ■ 



which is precisely condition (fT4 



(18) 

(19) 
□ 
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Lemma 1. Assume that H is C 2 on R 2 "\{0} and that H"(x) is non-degenerate 
for any x ^= 0. Then any local minimizer x of ' i\) has minimal period T. 

Proof. We know that x, or x + £ for some constant £ £ H 2 ™, is a T-periodic 
solution of the Hamiltonian system: 

x = JH'{x) . (20) 

There is no loss of generality in taking £ = 0. So ip(x) > ip(x) for all x in 
some neighbourhood of x in IT 1 ' 2 (TR/TZ; TR 2n ) . 

But this index is precisely the index it(x) of the T-periodic solution x over 
the interval (0,T), as defined in Sect. 2.6. So 

i T {x) = . (21) 

Now if x has a lower period, T/k say, we would have, by Corollary 31: 

i T (x) = i k T/k(x) > ki T / k (x) + fc-l>fc-l>l . (22) 

This would contradict ([2T]l . and thus cannot happen. □ 

Notes and Comments. The results in this section are a refined version of[l980; 
the minimality result of Proposition 14 was the first of its kind. 

To understand the nontriviality conditions, such as the one in formula (|16j) . 
one may think of a one-parameter family xt, T £ (27ra; _1 , 27t6^ c 1 ) of periodic 
solutions, xt(0) = xt(T), with xt going away to infinity when T — > 2ituj~ 1 , 
which is the period of the linearized system at 0. 



Table 1. This is the example table taken out of The TftXbook, p. 246 



Year 


World population 


8000 B.C. 


5,000,000 


50 A.D. 


200,000,000 


1650 A.D. 


500,000,000 


1945 A.D. 


2,300,000,000 


1980 A.D. 


4,400,000,000 



Theorem 1 (Ghoussoub-Preiss). Assume H(t,x) is (0, e)-subquadratic at 
infinity for all e > 0, and T-periodic in t 

H(t, •) is convex Vf (23) 

H(-,x) is T-periodic Vx (24) 
H (t, x) > n (\\x\\) with n(s)s _1 — » oo as s — » oo (25) 
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Ve>0, 3c : H(t,x) < ^\\xf + c . (26) 

Assume also that H is C 2 , and H"(t,x) is positive definite everywhere. Then 
there is a sequence Xk, k <E IN, of kT -periodic solutions of the system 

x = JH'(t,x) (27) 

such that, for every k S IN, there is some p a e IN with: 

P > Po => x pk ^ x k . (28) 

□ 

Example 1 (External forcing ). Consider the system: 

x = JH'{x) + f(t) (29) 

where the Hamiltonian H is (0, &oo)-subquadratic, and the forcing term is a 
distribution on the circle: 

f=j t F + f Q with F e L 2 (m,/T2Z; H 2n ) , (30) 
where f := T _1 f(t)dt. For instance, 

/(*) = E « . ( 31 ) 

fceiN 

where 5 k is the Dirac mass at t = k and £ G 1R 2 " is a constant, fits the pre- 
scription. This means that the system x = JH'(x) is being excited by a series 
of identical shocks at interval T. 

Definition 1. Let A^^t) and i?oo(£) be symmetric operators in JR 2n , depending 
continuously on t G [0,T], such that A^^) < -Boo(i) for all t. 

A Borelian function H : [0,T] x H 2 " JR is called (A^, B^-subquadratic 



at infinity if there exists a function N(t, x) such that: 

H(t,x) = ^{A 00 {t)x,x)+N(t,x) (32) 

Vf , N(t, x) is convex with respect to x (33) 

N(t, x) > n{\\x\\) with n(s)s^ 1 -> +oo as s ->• +oo (34) 

BcelR : x) < i (Boo^x,^) +c Vx . (35) 



If A^t) = aool and B^t) = b^I, with < s H, we s/mZZ say i/iai 
-ff is (doo, boo) -subquadratic at infinity. As an example, the function ||x|| a , with 
1 < a < 2, is (0, e)-subquadratic at infinity for every e > 0. Similarly, the 
Hamiltonian 

H{t,x) = \k\\k\\ 2 + \\x\r (36) 
is (fc, fc + e)-subquadratic for every e > 0. iVoie fftaf, if k < 0, it is not convex. 
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Notes and Comments. The first results on subharmonics were obtained by Rabi- 
nowitz in 1985 , who showed the existence of infinitely many subharmonics both 
in the subquadratic and superquadratic case, with suitable growth conditions 
on H'. Again the duality approach enabled Clarke and Ekeland in 119811 to treat 
the same problem in the convex-subquadratic case, with growth conditions on 
H only. 

Recently, Michalek and Tarantello (see Michalek, R., Tarantello, G. 1982]and 
Tarantcllo, G. I1983|) have obtained lower bound on the number of subharmonics 
of period kT, based on symmetry considerations and on pinching estimates, as 
in Sect. 5.2 of this article. 
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